Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/adc55fd8-7259-36fa-a484-fc579aa90c8d.roa
File:                     adc55fd8-7259-36fa-a484-fc579aa90c8d.roa (raw, json)
Hash identifier:          hOyz8k7kt//ZSzaYI8vIyb+OYZqht0BSqfEdK79P5lg=
Subject key identifier:   AE:DF:EE:A2:7A:4D:70:1D:31:B1:B8:2B:1A:AD:D7:94:C3:37:16:E3
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F4328584B434C68E7F444962EBD3E3640
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/adc55fd8-7259-36fa-a484-fc579aa90c8d.roa
Signing time:             Sun 21 Sep 2025 01:00:32 +0000
ROA not before:           Sun 21 Sep 2025 01:00:32 +0000
ROA not after:            Sat 20 Dec 2025 02:00:32 +0000
asID:                     16591
IP address blocks:        136.58.64.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:43:4c:68:e7:f4:44:96:2e:bd:3e:36:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Sep 21 01:00:32 2025 GMT
            Not After : Dec 20 02:00:32 2025 GMT
        Subject: CN=93339a63-49a7-4d41-b160-ac95dd5e4376
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:fe:21:64:bd:5b:f6:05:68:cf:68:0b:16:55:
                    4e:2c:43:2a:e4:17:14:31:f1:40:8f:17:9b:a4:35:
                    45:fd:93:1f:f3:e9:94:b6:09:e7:fa:92:b8:ed:be:
                    5a:81:72:fd:25:ac:a3:fd:77:06:a8:ef:75:b9:70:
                    17:c1:c1:1e:8a:51:8b:76:d7:b7:2b:bd:2b:73:cb:
                    7c:6b:3b:d0:64:72:5e:b8:9c:71:46:62:9f:94:10:
                    f8:ef:70:64:09:17:22:62:2b:38:d3:ef:04:dd:14:
                    b8:72:db:f5:80:b3:93:6b:e4:ec:f2:47:5b:02:61:
                    3a:c3:69:3e:62:e6:1e:f0:be:23:47:eb:c2:20:57:
                    9b:de:ec:ff:5c:43:2d:92:09:d8:5e:18:f0:21:8f:
                    b5:5d:06:e0:be:35:cc:bb:04:f1:ec:e6:53:62:4f:
                    61:2c:5f:07:66:bf:d8:90:3d:de:6a:92:ba:0b:a6:
                    2a:de:18:df:dc:f8:2f:cd:7a:fa:bf:94:06:0a:2d:
                    ce:14:99:f0:c6:1e:95:97:12:2d:ce:4b:9e:1f:1d:
                    59:76:c0:73:27:f9:6b:d7:23:30:56:5e:b7:25:60:
                    c4:ba:68:92:11:ca:fc:3c:b5:c8:a8:4e:10:2c:99:
                    8a:97:bc:03:d4:9b:ce:9e:45:74:2e:e3:00:d8:44:
                    b6:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:DF:EE:A2:7A:4D:70:1D:31:B1:B8:2B:1A:AD:D7:94:C3:37:16:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/adc55fd8-7259-36fa-a484-fc579aa90c8d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.58.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:6b:9f:22:c8:a9:a9:fb:a5:d1:b7:cb:3d:c0:1f:d7:fa:e2:
         2a:d1:a0:a2:39:e6:e6:fc:9e:01:96:87:4e:a6:79:c7:d0:3a:
         78:45:b1:f4:b6:ce:f7:83:94:c2:a0:24:8a:30:84:58:33:95:
         b6:a2:f9:77:ac:fd:11:b0:33:d7:da:60:2b:39:c8:8f:98:11:
         e3:90:fe:81:8c:00:00:88:4a:f7:9d:9b:f5:9e:16:a2:9c:1f:
         d7:47:f6:fd:7a:9c:da:29:b1:3c:56:7a:75:62:43:43:5a:15:
         75:7f:c3:9f:26:61:29:87:8a:a2:83:42:51:88:d4:c2:10:91:
         20:28:30:a0:65:a4:93:28:d3:03:d1:5b:8e:0d:8e:b9:a5:5f:
         ed:eb:f1:99:8a:e2:fc:81:79:7f:6e:b1:f7:f3:15:71:11:b9:
         26:71:68:3d:73:f7:35:c4:e2:ea:66:f1:0a:8f:6b:a7:95:a5:
         3a:52:9b:c3:0b:29:6d:d3:85:5b:ea:33:3d:74:33:a9:2f:da:
         b5:b2:83:10:24:ef:05:85:66:27:8c:bd:51:c7:90:c8:0d:81:
         92:6b:e9:9e:3f:5a:7c:af:d7:2c:b1:75:bf:34:44:8d:f4:f0:
         52:24:ce:0b:8b:0c:65:a9:b4:1b:35:d5:9d:59:0b:c3:f7:82:
         a5:fa:17:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 21:14:50 2025 by rpki-client